dig and nslookup don't work

[Sharuzzaman Ahmat Raslan]

On Tue, Mar 10, 2026, 8:51 AM René Berber via Cygwin <cygwin@cygwin.com>
wrote:

> On 3/9/2026 2:38 AM, Joel Strasser via Cygwin wrote:
>
> > I recently reinstalled Cygwin on Windows 11.
> >
> > I added the bind-utils package to get the dig command.
> >
> > The command does not produce any output.
> >
> > I tried to reinstall the package and even reinstalled Cygwin.
> >
> > I included a cygcheck.out and the strace output of dig.
>
> strace shows the problem, and it is something installed in your system
> that is not part of Cygwin.  Probably a security package that injects a
> "security" library:
>
>  From dig_strace.txt
>
> --- Process 48772 created
> --- Process 48772 loaded C:\Windows\System32\ntdll.dll at 00007ffc57f70000
> --- Process 48772 loaded C:\Windows\System32\hmpalert.dll at
> 00007ffc54ae0000  <------- injects itself immediately
> --- Process 48772 loaded C:\Windows\System32\kernel32.dll at
> 00007ffc55dd0000
> ...
> --- Process 48772 (pid: 649) thread 49216 created
> --- Process 48772 (pid: 649), exception 80000001 at 00007ffc54aee296
> ________________________________________^^^^^^^^____^^^^^^^^^^^^
>                                          STATUS_GUARD_PAGE_VIOLATION
>
> If it is an anti-virus maybe create an exception?
>
> There's nothing Cygwin can do against other (injected) libraries.
> --
> R.B.
>
> --
> Problem reports:      https://cygwin.com/problems.html
> FAQ:                  https://cygwin.com/faq/
> Documentation:        https://cygwin.com/docs.html
> Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple



hmpalert.dll is a critical Dynamic Link Library file for Sophos Intercept X
and HitmanPro.Alert, designed to protect systems by monitoring and blocking
exploit techniques. It operates by injecting itself into running processes.
It is often associated with system crashes (BSOD), application errors, or
performance issues

--
Sharuzzaman Ahmat Raslan

>
>